Log in Start free

Vulnerability · Published Oct 17, 2024 · Assigned by Xerox

CVE-2024-6333Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

High 7.2

In plain English

A high-severity OS command injection in AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 from Xerox. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)1.2%top 32.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

Affected products (as reported)

VendorProductVersions
Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 103.xxx.024.18600
Xerox Xerox® EC8036 / EC8056 103.xxx.024.18600
Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2022) 103.023.031.35105
Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2024) 103.xxx.013.14115
Xerox AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024) 119.xxx.023.13006
Xerox AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023) 111.xxx.003.11600
Xerox VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024) 119.xxx.003.11705
Xerox WorkCentre 3655/3655i 075.060.004.07810
Xerox WorkCentre 5945/55i 075.091.004.07810
Xerox WorkCentre 6655/6655i 075.110.004.07810
Xerox WorkCentre 7220/7225i 075.030.004.07810
Xerox WorkCentre 7830/7835i 075.010 004.07810
Xerox WorkCentre 7845/7855i 075.040.004.07810
Xerox WorkCentre 7845/7855 (IBG) 075.080.004.07810
Xerox WorkCentre 7970/7970i 075.200.004.07810
Xerox WorkCentre EC7836 075.050.004.07810
Xerox WorkCentre EC7856 075.020.004.07810

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References